SAMPLE EVIDENCE for PM-04 (made-up app Tidyhaus; not a real review)

payments_log has UNIQUE(stripe_event_id); the handler inserts the event id first and stops on a duplicate-key error.